As Kurt told me the OpenSSL package on wheezy already include support for AES NI and for the records:
To test it we have to use the EVP interface, my benchmark show 434,758.66k vs. 76,116.20k that's 571 % increase !!! With AES NI this are the results: # openssl speed -evp aes-256-cbc Doing aes-256-cbc for 3s on 16 size blocks: 80973800 aes-256-cbc's in 2.98s Doing aes-256-cbc for 3s on 64 size blocks: 21301656 aes-256-cbc's in 3.00s Doing aes-256-cbc for 3s on 256 size blocks: 5392031 aes-256-cbc's in 3.00s Doing aes-256-cbc for 3s on 1024 size blocks: 1352420 aes-256-cbc's in 2.98s Doing aes-256-cbc for 3s on 8192 size blocks: 169036 aes-256-cbc's in 3.00s OpenSSL 1.0.1e 11 Feb 2013 built on: Tue Sep 10 11:45:51 COT 2013 options:bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wa,--noexecstack -Wall -march=i686 -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256-cbc 434758.66k 454435.33k 460119.98k 464724.19k 461580.97k Without AES NI this are the results: # openssl speed aes-256-cbc Doing aes-256 cbc for 3s on 16 size blocks: 14176643 aes-256 cbc's in 2.98s Doing aes-256 cbc for 3s on 64 size blocks: 3893897 aes-256 cbc's in 3.00s Doing aes-256 cbc for 3s on 256 size blocks: 994658 aes-256 cbc's in 3.00s Doing aes-256 cbc for 3s on 1024 size blocks: 251138 aes-256 cbc's in 3.00s Doing aes-256 cbc for 3s on 8192 size blocks: 31452 aes-256 cbc's in 2.98s OpenSSL 1.0.1e 11 Feb 2013 built on: Tue Sep 10 11:45:51 COT 2013 options:bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wa,--noexecstack -Wall -march=i686 -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256 cbc 76116.20k 83069.80k 84877.48k 85721.77k 86461.34k Slds. -- Typed on my key64.org keyboard Nestor A Diaz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
